Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/3WwbXErBVVwkKdbwa3aM277fOY4.roa
File: 3WwbXErBVVwkKdbwa3aM277fOY4.roa (raw, json)
Hash identifier: /4LTYbTJebYu7ogv4ICY0IWUJJVhPM5Y4TiGzlnqNdM=
Subject key identifier: DD:6C:1B:5C:4A:C1:55:5C:24:29:D6:F0:6B:76:8C:DB:BE:DF:39:8E
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E7B1D0DA83C8744D350FC559DBCE8FF89
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/3WwbXErBVVwkKdbwa3aM277fOY4.roa
Signing time: Tue 26 Mar 2024 14:14:45 +0000
ROA not before: Tue 26 Mar 2024 14:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16625
IP address blocks: 84.53.156.0/22 maxlen: 22
84.53.164.0/22 maxlen: 22
84.53.188.0/22 maxlen: 22
88.221.4.0/22 maxlen: 22
88.221.8.0/22 maxlen: 22
88.221.16.0/22 maxlen: 22
88.221.32.0/22 maxlen: 22
88.221.36.0/22 maxlen: 22
88.221.40.0/22 maxlen: 22
88.221.44.0/22 maxlen: 22
88.221.58.0/23 maxlen: 23
88.221.60.0/22 maxlen: 22
88.221.68.0/22 maxlen: 22
88.221.76.0/22 maxlen: 22
88.221.96.0/22 maxlen: 22
88.221.124.0/22 maxlen: 22
88.221.130.0/23 maxlen: 23
88.221.136.0/21 maxlen: 21
88.221.148.0/22 maxlen: 22
88.221.152.0/21 maxlen: 21
88.221.164.0/22 maxlen: 22
88.221.168.0/22 maxlen: 22
88.221.176.0/21 maxlen: 21
88.221.224.0/21 maxlen: 21
88.221.236.0/22 maxlen: 22
88.221.240.0/21 maxlen: 21
88.221.248.0/22 maxlen: 22
92.122.0.0/21 maxlen: 21
92.122.8.0/22 maxlen: 22
92.122.12.0/22 maxlen: 22
92.122.16.0/22 maxlen: 22
92.122.20.0/22 maxlen: 22
92.122.24.0/22 maxlen: 22
92.122.32.0/21 maxlen: 21
92.122.44.0/22 maxlen: 22
92.122.60.0/22 maxlen: 22
92.122.64.0/22 maxlen: 22
92.122.72.0/22 maxlen: 22
92.122.76.0/22 maxlen: 22
92.122.80.0/22 maxlen: 22
92.122.88.0/22 maxlen: 22
92.122.96.0/22 maxlen: 22
92.122.104.0/22 maxlen: 22
92.122.108.0/22 maxlen: 22
92.122.144.0/22 maxlen: 22
92.122.148.0/22 maxlen: 22
92.122.160.0/22 maxlen: 22
92.122.196.0/22 maxlen: 22
92.122.246.0/23 maxlen: 23
92.122.248.0/24 maxlen: 24
92.122.249.0/24 maxlen: 24
92.122.250.0/24 maxlen: 24
92.122.251.0/24 maxlen: 24
92.123.4.0/22 maxlen: 22
92.123.16.0/22 maxlen: 22
92.123.20.0/22 maxlen: 22
92.123.28.0/22 maxlen: 22
92.123.32.0/22 maxlen: 22
92.123.36.0/22 maxlen: 22
92.123.44.0/22 maxlen: 22
92.123.50.0/23 maxlen: 23
92.123.52.0/22 maxlen: 22
92.123.56.0/22 maxlen: 22
92.123.80.0/22 maxlen: 22
92.123.84.0/22 maxlen: 22
92.123.88.0/22 maxlen: 22
92.123.112.0/22 maxlen: 22
92.123.148.0/22 maxlen: 22
92.123.156.0/22 maxlen: 22
92.123.164.0/22 maxlen: 22
92.123.172.0/22 maxlen: 22
92.123.176.0/22 maxlen: 22
92.123.184.0/22 maxlen: 22
92.123.196.0/22 maxlen: 22
92.123.200.0/22 maxlen: 22
92.123.204.0/22 maxlen: 22
92.123.216.0/22 maxlen: 22
92.123.240.0/22 maxlen: 22
92.123.252.0/22 maxlen: 22
95.100.16.0/20 maxlen: 20
95.100.46.0/23 maxlen: 23
95.100.48.0/20 maxlen: 20
95.100.64.0/20 maxlen: 20
95.100.80.0/22 maxlen: 22
95.100.112.0/20 maxlen: 20
95.100.136.0/24 maxlen: 24
95.100.137.0/24 maxlen: 24
95.100.138.0/24 maxlen: 24
95.100.139.0/24 maxlen: 24
95.100.140.0/22 maxlen: 22
95.100.160.0/22 maxlen: 22
95.100.176.0/22 maxlen: 22
95.100.182.0/23 maxlen: 23
95.100.184.0/22 maxlen: 22
95.100.188.0/22 maxlen: 22
95.100.208.0/22 maxlen: 22
95.100.216.0/22 maxlen: 22
95.100.224.0/20 maxlen: 20
95.100.244.0/22 maxlen: 22
95.100.250.0/23 maxlen: 23
95.101.0.0/21 maxlen: 21
95.101.14.0/23 maxlen: 23
95.101.16.0/22 maxlen: 22
95.101.40.0/22 maxlen: 22
95.101.44.0/22 maxlen: 22
95.101.48.0/22 maxlen: 22
95.101.56.0/22 maxlen: 22
95.101.64.0/22 maxlen: 22
95.101.68.0/24 maxlen: 24
95.101.69.0/24 maxlen: 24
95.101.70.0/24 maxlen: 24
95.101.71.0/24 maxlen: 24
95.101.80.0/22 maxlen: 22
95.101.84.0/22 maxlen: 22
95.101.88.0/22 maxlen: 22
95.101.92.0/22 maxlen: 22
95.101.96.0/22 maxlen: 22
95.101.100.0/22 maxlen: 22
95.101.104.0/22 maxlen: 22
95.101.124.0/22 maxlen: 22
95.101.144.0/22 maxlen: 22
95.101.148.0/22 maxlen: 22
95.101.152.0/22 maxlen: 22
95.101.160.0/22 maxlen: 22
95.101.164.0/22 maxlen: 22
95.101.172.0/22 maxlen: 22
95.101.176.0/22 maxlen: 22
95.101.184.0/22 maxlen: 22
95.101.188.0/22 maxlen: 22
95.101.192.0/22 maxlen: 22
95.101.196.0/22 maxlen: 22
95.101.200.0/22 maxlen: 22
95.101.208.0/20 maxlen: 20
95.101.224.0/22 maxlen: 22
95.101.240.0/20 maxlen: 20
195.95.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 27 Mar 2024 12:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:1d:0d:a8:3c:87:44:d3:50:fc:55:9d:bc:e8:ff:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 26 14:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd6c1b5c4ac1555c2429d6f06b768cdbbedf398e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:81:72:0c:93:8d:4b:84:3d:c1:ff:23:a4:
9b:a0:a9:f4:e5:eb:cc:56:50:77:67:29:dc:6a:39:
49:7f:c6:e6:bd:1a:19:a5:89:1e:84:67:5c:5f:36:
73:c8:90:41:e2:98:3d:e3:2b:ba:6c:50:3b:65:d0:
7e:88:eb:ae:17:39:a1:aa:fe:00:ee:d9:ab:8c:7e:
f5:c9:fa:c3:c2:36:72:eb:cb:eb:30:d2:d4:01:6d:
25:50:fc:c9:d5:6f:5f:38:fb:b9:4a:1b:82:6f:de:
51:ac:5b:58:c8:9b:0c:09:ae:c7:c1:e8:2e:d1:ff:
8a:32:80:49:2e:6f:aa:fe:59:42:f2:de:d4:25:f7:
93:eb:09:cc:b9:2d:89:da:e2:4d:cf:cc:61:a4:88:
17:f7:da:9f:d7:4f:66:be:94:8c:25:12:de:f0:a4:
0c:54:84:b3:c8:b9:60:e8:83:f4:da:0a:73:f1:d7:
8c:68:aa:0a:b0:fc:7a:d1:c9:24:9a:f2:83:ef:44:
59:39:94:ce:f9:b5:7b:4e:53:6b:88:ed:33:ee:53:
82:20:09:a9:07:c7:10:f2:09:c8:39:42:1d:b9:3f:
cd:e6:07:9d:5d:49:fb:bf:a0:3d:0f:62:1f:a6:ad:
19:ae:d2:96:24:c9:80:f5:68:fc:43:c2:da:82:3c:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:1B:5C:4A:C1:55:5C:24:29:D6:F0:6B:76:8C:DB:BE:DF:39:8E
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/3WwbXErBVVwkKdbwa3aM277fOY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.53.156.0/22
84.53.164.0/22
84.53.188.0/22
88.221.4.0-88.221.11.255
88.221.16.0/22
88.221.32.0/20
88.221.58.0-88.221.63.255
88.221.68.0/22
88.221.76.0/22
88.221.96.0/22
88.221.124.0/22
88.221.130.0/23
88.221.136.0/21
88.221.148.0-88.221.159.255
88.221.164.0-88.221.171.255
88.221.176.0/21
88.221.224.0/21
88.221.236.0-88.221.251.255
92.122.0.0-92.122.27.255
92.122.32.0/21
92.122.44.0/22
92.122.60.0-92.122.67.255
92.122.72.0-92.122.83.255
92.122.88.0/22
92.122.96.0/22
92.122.104.0/21
92.122.144.0/21
92.122.160.0/22
92.122.196.0/22
92.122.246.0-92.122.251.255
92.123.4.0/22
92.123.16.0/21
92.123.28.0-92.123.39.255
92.123.44.0/22
92.123.50.0-92.123.59.255
92.123.80.0-92.123.91.255
92.123.112.0/22
92.123.148.0/22
92.123.156.0/22
92.123.164.0/22
92.123.172.0-92.123.179.255
92.123.184.0/22
92.123.196.0-92.123.207.255
92.123.216.0/22
92.123.240.0/22
92.123.252.0/22
95.100.16.0/20
95.100.46.0-95.100.83.255
95.100.112.0/20
95.100.136.0/21
95.100.160.0/22
95.100.176.0/22
95.100.182.0-95.100.191.255
95.100.208.0/22
95.100.216.0/22
95.100.224.0/20
95.100.244.0/22
95.100.250.0/23
95.101.0.0/21
95.101.14.0-95.101.19.255
95.101.40.0-95.101.51.255
95.101.56.0/22
95.101.64.0/21
95.101.80.0-95.101.107.255
95.101.124.0/22
95.101.144.0-95.101.155.255
95.101.160.0/21
95.101.172.0-95.101.179.255
95.101.184.0-95.101.203.255
95.101.208.0-95.101.227.255
95.101.240.0/20
195.95.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:01:12:e6:41:50:d2:39:66:4e:e7:70:fa:3f:9f:7c:09:77:
41:1a:41:33:7c:17:fe:59:dd:58:4a:6b:e4:07:6b:a6:09:7b:
3b:67:35:af:13:ee:75:99:9c:66:2c:ec:c1:b1:d6:8c:11:25:
35:9a:74:ac:97:e4:5e:70:3e:95:b5:3c:44:52:1a:3c:fe:45:
f9:bc:61:75:31:61:1d:61:27:f1:65:c7:47:87:61:b6:5b:51:
0a:72:92:48:89:00:61:69:9f:0a:44:ca:c7:bf:e6:93:5f:e2:
b9:8f:c7:ed:f0:cc:4e:82:c9:b6:f2:66:f2:43:b6:10:62:c2:
a3:c4:0c:ac:01:dc:65:77:74:f3:ab:6a:93:cf:bc:76:a9:91:
c3:ca:ab:e9:41:db:d3:cf:c8:99:ac:ac:7e:7e:ed:75:c1:e5:
f3:63:7b:b7:20:18:d0:b4:28:5e:8b:31:53:34:44:b3:cc:bb:
00:17:24:e8:ce:92:34:d7:cb:45:ff:25:ac:a4:69:da:9e:a0:
d8:6f:5c:b1:e3:e1:b4:08:9e:da:65:62:37:c5:0e:73:f8:ce:
aa:ae:a9:95:bc:2b:da:e1:9f:9f:49:a7:37:35:b9:70:89:3e:
a8:a3:bc:11:0a:4f:1a:e2:49:1c:3a:7a:ae:7e:10:8b:e6:fc:
c2:b4:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 17:41:39 2024 by rpki-client on console-ams.rpki-client.org